#general

1 messages · Page 895 of 1

jolly aspen
#

I don’t have eyes

eternal timber
#

Bummer

pallid lotus
#

Your processor has a certain number of virtual cores. Usually 16, 32, or 64 these days. If we were dealing with a task which did not require any I/O or dependencies then there would be no point in opening more threads than you have processors, or you'd be wasting a lot of time switching between them.
As it stands we are dealing with network connections, which obviously have latency. The optimal number of threads is therefore just a bit higher than your total number of available cores. The exact amount higher depends on how much latency, what else you're running, etc, etc, etc.

#

So a million threads would actually be pretty inefficient, but using a processor with 64 virtual cores, 70 or 80 might be reasonably effective, context dependent.
If you were after maximum efficiency then you'd benchmark it. As it is, you probably don't care that much, so just pick a number in that range and it'll be fine kekw

eternal timber
#

What a nerd

jolly aspen
#

I’m going to benchmark 1 million

pallid lotus
#

Also worth remembering to take the target into account though. You don't want to risk overloading the server

jolly aspen
pallid lotus
#

On one hand, AWS get pretty annoyed if you mess with their network infrastructure...
On the other hand, that's THM's problem to deal with kekw

vague dragon
#

the path stoped in the careers and jobs of cybersecurity

lusty tusk
lusty tusk
drowsy dust
twin ridgeBOT
#

Gave +1 Rep to @lusty tusk (current: #1765 - 2)

lusty tusk
#

Hey friend. Thank you for my first rep 🙂

eternal timber
#

Second actually

drowsy dust
#

No problem :) enjoy

vague dragon
lusty tusk
vague dragon
twin ridgeBOT
#

Gave +1 Rep to @lusty tusk (current: #1329 - 3)

lusty tusk
#

Quick question for y'all. I want to setup my own home lab to get practice with SIEM tools as well as some pen testing. I can obviously look up a guide for this, but I just wanted to see if anyone had any resources they really liked, or guides they enjoyed following.

umbral bay
#

👋

blazing granite
umbral bay
#

Busy with many new exciting projects. 😎 How about yourself?

blazing granite
#

I'm eating dinner

umbral bay
quasi hedge
drowsy dust
twin ridgeBOT
#

Gave +1 Rep to @drowsy dust (current: #168 - 49)

umbral bay
blazing granite
lusty tusk
umbral bay
lusty tusk
#

If that question doesn't have the best clarity, let me know 😂

blazing granite
drowsy dust
#

too much to explain really. but to link them together it just takes configuration of everything

lusty tusk
#

Like do you test out new pentesting techniques you've learned?

drowsy dust
#

Ah. Maybe you could learn by attacking your machine and seeing what triggers it and what you need to add to make those triggers go off

umbral bay
eternal timber
#

ankara Messi

drowsy dust
#

if not then make it so it gets triggered

#

etc

blazing granite
drowsy dust
eternal timber
drowsy dust
#

you can tweak both your attacking and defense by doing that. i.e maybe doing a stealth scan gets past your SOC then you can set up your soc to pick up that next time. and then try another way your SOC doesnt pick up

#

etc

lusty tusk
twin ridgeBOT
#

Gave +1 Rep to @drowsy dust (current: #160 - 50)

drowsy dust
#

that and my pfsense

lusty tusk
drowsy dust
#

and yeah its to protect my endpoints

#

pfsense is my firewall into my whole network

inner goblet
#

Ugh! Keyboard oil all over my keyboard 😩

eternal timber
#

Why’d you say it like that

drowsy dust
#

too much john hammond

lusty tusk
twin ridgeBOT
#

Gave +1 Rep to @drowsy dust (current: #157 - 51)

inner goblet
drowsy dust
eternal timber
inner goblet
static acorn
#

i smel chez

drowsy dust
#

Guys guys. lets just admire Ed

static acorn
#

oh heeeell yeah

#

ed my beloved

eternal timber
eternal timber
inner goblet
drowsy dust
eternal timber
#
0    Meng Hao     679
1     Li Qiye    6340
2        Wang  234000```
fossil merlin
#

Hiiiii

eternal timber
inner goblet
#

Because I’m oiling my keys?

eternal timber
#

Paul Erdos used to religiously take amphetamine

fossil merlin
#

You can oil your keyboard?

#

I thought fast food grease and crumbs was enough for most gamers?

eternal timber
fossil merlin
fossil merlin
mossy river
upbeat patio
#

how do i join the JR Penetration Tester channel

upbeat patio
#

Thanks Jabba

mossy river
#

Always 😎

eternal timber
# mossy river this meme put fetty wap into my top 10

Yeah, baby.
Ay, I want you to be
mine again, baby, ay.
I know my lifestyle is
driving you crazy, ay.
I can never see myself without you,
we call them fans, though,
girl, you know what we do.
I go out of my way to please you,
I go out of my way to see you.

near sapphire
#

done, finally done

drowsy dust
#

"and I got this soda"

delicate compass
#

hello

mossy adder
#

hello

#

does anyone know how to get an email

#

i lost complete acces to

elder peak
mossy adder
#

L server

elder peak
boreal scarab
obtuse swift
#

Hi guys I'm doing master's in computer application i want to start my journey into cyber security can anyone guide or give me a roadmap

eternal timber
#

“I am become meme”

dark frost
#

If you in software apps you may follow the security devs path

drowsy dust
dark frost
crude stump
steep mountain
#

Will there ever be an ethical hacker path?

crude stump
#

Wdym

#

Is pentesting not ethical hacking to you

steep mountain
#

Or is that basically pentester

crude stump
#

Yes

steep mountain
#

Okay

crude stump
#

Basically that

steep mountain
#

Okay thought they were two different roles

crude stump
#

Honestly, ethical hacker is just hacking but ethically 😂

steep mountain
#

True

cold sparrow
#

Hello anyone here know anything about aws buckets?

crude stump
carmine tinsel
crude stump
#

Jabba probably would but he’s not online

crude stump
steep mountain
carmine tinsel
#

when is thm going to add an unethical hacker path 😈

crude stump
carmine tinsel
#

all the wannabe instagram hackers here will finally have resources

crude stump
#

It’s always instagram too

#

That or Facebook

carmine tinsel
#

someone here asked about snapchat lately

#

didn't know ppl still use snapchat in the year of our lord 2025

#

i thoutght that shit died in 2016

cold sparrow
#

ah im doing bugbounty atm found a aws bucket that i was able to curl upload a .txt to. just not sure what kind of vulnerability this is even if it is at all. from what i understand if i can download/ upload i can read/write and change data or put malicious things on there right?

#

i believe it should be 403 at least

near sapphire
rapid merlin
#

Sup Ya'll!

#

Oof, yeah don't be unethical we got enough threat actors in the world as it is.

mellow narwhal
#

or P1 if its a public facing asset, normally

silver sky
cold sparrow
mellow narwhal
rapid merlin
#

yeah for real, good job @cold sparrow

carmine tinsel
#

bro youre on a roll

#

enjoy your bug bounty $$$, spend it on something cool like pentesterlab pro for me kekw

rapid merlin
cold sparrow
#

haha Thanks, the real problem now is writing the report lmao

carmine tinsel
#

'yeah so there's like a vulnerability on your website and i hacked the shit out of it'

rapid merlin
#

Has anyone used the github workflows before?

cold sparrow
#

Hackerone has somewhat of a template to follow gladly

mellow narwhal
#

I find that Bugcrowd >>> Hackerone

#

Especially in terms of general UI

cold sparrow
#

yeah ive been wanting to go on there more. havent found much on h1 maybe i would on bc

runic copper
#

Hey guys, just starting my journey super excited!

half relic
#

good luck

runic copper
#

thanks!

cloud quiver
runic copper
#

How long have you guys been doing it for?

half relic
#

i read a bunch of books a long time ago but i didn't know there were websites with labs like this that you could use to actually use the information and i forgot most of it but i just signed up for this this week lol

#

i didn't want to create my own lab because it seemed like you would already know what the vulnerabilites are and that would be boring lol

runic copper
#

I am on introduction to Lan, i feel like i am going to forget alot of the information do you take any notes?

half relic
#

so about a week but most of this stuff sounds familiar lol

#

yeah i should have from the beginning but i just got obsdian installed

#

too bad i dont' know markdown lol

clear jackal
runic copper
#

I can imagine reading books cant even compare to this type of learning though.

#

Thanks guys will do that and save myself the stress of trying to remember/research stuff.

half relic
#

i learn better by doing so i think this will be better

#

i still think books would have a ton of information that it would be hard to get in this format though

#

anyway

#

like the web application hacker's handbook is one i read and that had a ton of information

#

there is one about bug bounties i want to get

#

bug bouty bootcamp

#

might be some overlap though

eternal timber
#

Action Jack Barker

daring vigil
#

Just finished a room on PowerShell me no likey, necessary evil, powerful and good stuff, just gross after learning linux so well haha

half relic
#

i was gonna use media wiki for notes since i can easily install it on my server which has to be windows and access it from any device, but obsidian has files that i think would be more usable with some other editor if i get tired of it

#

yeah the thing i dont' like about powershell is how incredibly long even the simplest scripts are

#

compared to bash

#

its annoyhing

#

it seems overengineered

daring vigil
#

Like executing one command on a remote computer is crazy

#

Lots of typing, on the bright side once you know how to invoke a script you can save anything you spent a lot of time engineering and then you don't have to repeat it haha.

half relic
#

scripts are nice

#

not that you can't reuse bash scripts

daring vigil
half relic
#

it just seems everything to do with windows is way overengineered and over complicated

#

there are probably exceptions but it seems that way

carmine tinsel
#

I enjoy it because its complicated

#

So far at least

#

I've only done the basicest of shit with windows but the organization of it fascinates me

half relic
#

i like how simple linux is

#

and transparent

#

it doesn't hide how it works

eternal timber
clear jackal
#

Time on keyboard also makes a difference when it comes to perceived clunkiness

sturdy pike
#

'tis my test and I know everything

#

Good morning everyone

half relic
#

i just mean that with windows it's usually harder to tell exactly what its doing

sturdy pike
#

how are you?

half relic
#

i dont' know why i can't think of a good example atm lol

fringe nacelle
half relic
#

i think the registry is kind of labyrinthine and unintuitive and i don't know why they had to create their own proprietary database just for settings then provide the most unusable tool to interact with it. I know there are better registry editors but i don't think you should have to rely on non native tools just to interact with a core feature where with linux everything is text so any editor works

#

I think putting each program and all the files associated with it in their own folder was a mistake too because it leads to absurdly long path variables.

#

you can't really add all of your softwar to the path because there are too many paths

#

i do kind of like how groups and permissions work though lol

#

seems more flexible than on linux

#

anyway ill stop since i dont' think anyone is reading this lol

clear jackal
#

I am

half relic
#

ah ok

grizzled void
#

As am I

azure hill
#

Will a VPN let us try gpt operator on a pro sub or ban

clear jackal
clear jackal
half relic
#

its actually been a while since it did, but what if i just wanted to add something to a shell menu or something

#

and a lot of software doesnt' clean up its registry keys

half relic
#

because if you want to run it without typing out the full path hyou have to add it to the path variable

#

if all your binaries are in one of a few folders you have a short path variable

eternal timber
#

df = pd.Dataframe(data)
df.to_csv(“data.csv”)

half relic
#

if they are each in their own folder you have to add every path and you hit the size limit of the path variable

#

its inconvenient

clear jackal
#

What are you doing/using where you have to add every path manually?

#

I'm trying to understand how you're using window, because it's not making sense in my head

half relic
#

it seems that a lot of windows versions of things don't add their path to the variable

clear jackal
#

To what variable

half relic
#

like eclipse

half relic
#

to %PATH%

#

so that if you just type eclipse it comes up

#

windows does have a search feature now

clear jackal
#

So you're just using CMD to do everything?

half relic
#

but it seems overwrought to have everything in it's own folder and not on the path so that you have to actually index and search things instead of just going directly to it

#

it seems it doesnt' bother me most of the time but at times if i am learning a programming language or something it becomes a pain

#

it depends on what im doing

amber summit
#

advent calendar wifi hacking ssh not working

#

is the attack box broken

clear jackal
#

From what you've said, it seems to me you're adding in unnecessary complexities. Just what I am thinking trying to follow along

amber summit
#

actually fuck it works just pass isn’t working

clear jackal
amber summit
#

is the password broken

half relic
azure hill
#

Isn't it only available in the US currently?

#

if we're not in the US would a vpn let us try operator

daring vigil
#

Do any of you guys have compiled bash scripts for like searching for flags, or setting up defensive anything on CTF competitions etc?

clear jackal
azure hill
#

or you mean coz unethical

#

if so makes sense and my bad just wondering

clear jackal
#

Yeah, sorry, I defaulted to THM

#

But yes, you should follow OpenAI's TOS

azure hill
#

Personally, I love following TOS 😄

half relic
#

i think most companies know if you are using a vpn ip anyway

azure hill
#

US residential proxy*

grizzled void
#

why not pipe the output of where into your command so you don't need to type it yourself?

azure hill
#

I'll ask gpt if it's allowed

clear jackal
#

If it's region locked, the answer is no

amber summit
#

why is this password not working

half relic
#

I just find the design of linux more pleasant

amber summit
#

not my first time ssh into thm i’m literally not doing anything wrong

half relic
#

Im surpirsed you dont' find it annoying to use command line tools in windows though

azure hill
clear jackal
half relic
#

and the tab completion is anoying

brazen isle
#

Has anyone tried the AWS Cloud Training ?

half relic
#

i think it is the design is just simple and kind of poetic or somthinng lol

clear jackal
eternal timber
brazen isle
half relic
#

I use both but i have a preference

clear jackal
amber summit
brazen isle
amber summit
#

the issue is when i enter password

clear jackal
eternal timber
cloud quiver
eternal timber
amber summit
#

yep

#

in the advent calendar room bro

clear jackal
brazen isle
eternal timber
#

Yes, I can’t think of a better place to start

molten sky
#

who punged me

#

it was thou

#

wat'd i miss

brazen isle
amber summit
#

the credentials weren’t the normal ones….

rapid merlin
#

After 1 hour && about 16mins I finally finished installing Arch Linux.

amber summit
#

condolences

rapid merlin
#

Yeah man, I use Arch btw.

pliant onyx
#

Congratulations! Now do it all over again

half relic
#

first linux distro i ever tried was gentoo. I picked it basically at random and i thought that all linux distros were like that lol

eternal timber
near sapphire
#

my first was parrot i think

rapid merlin
pliant onyx
#

First linux distro I tried was Kali

#

I also tried Ubuntu during my internship

rapid merlin
pliant onyx
#

Oh I also know Red Hat

half relic
#

oops

pliant onyx
#

I may have a badge or something for it

#

Red Hat Openshift

half relic
#

i took that exam and failed it lol

rapid merlin
half relic
#

red hat

rapid merlin
#

I can say it feels way better than Parrot

pliant onyx
rapid merlin
#

For some time I couldnt connect to wifi either

half relic
#

I used to want a distro where i could customize every single aspect but now i just want it to work reliably

pliant onyx
near sapphire
#

i dont know what i want so i always go default

rapid merlin
pliant onyx
#

Glad you got them right this time

#

Lemme show you something funny

rapid merlin
#

And then I used the wrong keyboard layout somehow

half relic
#

works now though

#

yay

pliant onyx
rapid merlin
#

LOL

pliant onyx
#

Lmfao

rapid merlin
#

38 mins in hes still not done

pliant onyx
#

Nop

rapid merlin
#

and the video looks like it just started

#

almost

half relic
#

it took me two different nights to install gentoo but i had to let it compile overnight

#

i took notes

#

lol

#

but it was the first time i used linux

sinful moon
# rapid merlin

whew it is not 2007 anymore, please do away with your non-blurred transparency

rapid merlin
rapid merlin
sinful moon
#

just like use your eyes and determine the readability of the terminal screenshot you have posted lol

#

I only half kid though

half relic
#

that was my only pc too and i decided to just get rid of windows so i had no pc till i got it right

sinful moon
#

if you like transparency, you just need to make it more opaque so it’s actually usable

half relic
#

lol

rapid merlin
#

i mean i have good eye sight

#

so far it hasnt been an issue but

#

probably

sinful moon
#

eyesight != readability

rapid merlin
#

im the one reading it 😄

sinful moon
#

True, so you’re just giving yourself a hard time for no good reason

jolly aspen
sinful moon
#

lol

pliant onyx
#

Audiobooks okay

sinful moon
#

Anyways I don’t care all that much, juts thought it was funny. Been a while since I saw a term that was so transparent

grizzled void
#

i find it quite readable imo however I wouldn't do this myself

jolly aspen
#

Layers are old school. Modern times we just sandwich everything together

rapid merlin
#

Does this look more readable?

pliant onyx
fringe nacelle
pliant onyx
grizzled void
# rapid merlin

gotta change the color to match your THM level color though

sinful moon
#

I mean there’s an entire distro for that… before lol they switched to Fedora

#

Not exactly a difficult assignment

eternal timber
sinful moon
#

Just limiting despite how far Asahi Linux has come

molten sky
#

@sinful moon o/

sinful moon
#

Heya!

#

Now I’m salty since I can’t play my MMO until 5am due to scheduled maintenance. Rip

molten sky
#

pretty sure companies schedule maintenance only when they know i'm gonna need to do something

eternal timber
#

I need a break

sinful moon
#

Yeah literally the day after I beat the main quest of the 2.0 content and was excited to try flying around and more lol

sinful moon
#

thankfully authentication still worked, we just couldn’t you know… administrate it lol

half relic
#

good thing authentication worked lol

sinful moon
#

Yeah I’ve never seen that go down, besides SMS and voice call methods which, shouldn’t be using those anyways

#

anyways it was nbd, I just called the user the next day and got them sorted

#

Alright chat is too quiet, Imma check into VC in another server and if that’s too boring, then just amuse one of my various obsessions after my plan for tonight has been ruined lol

pliant onyx
hollow wigeon
#

Virtual machine 1 was annoying af

molten sky
sinful moon
#

Eh it just prevented me from bringing user out of Bypass so nothing was really impacted with this security onboarding I was doing with them on this new computer, just delayed

#

although lol I couldn’t send them the normal SMS invite texts for the MFA app/service either

molten sky
#

good time to phish IT

sinful moon
# molten sky ~~good time to phish IT~~

lol we barely use the admin panel’s “lets send an MFA request to ensure the user is who they say they are” due to our relatively small scope. I know most everyone by name and the sound of their voice at this point, even with me working remotely

molten sky
#

i'm waiting for the day "ai" voice spoofing becomes half viable
will be fun

sinful moon
#

Mhmm, still really only in the realm of “warn your elderly parents about it and set up a passphrase”… if that

#

We do technically have passphrases for use with our clients but I have never seen that actually used lolol

molten sky
#

lucky for me about 30% of level 1 IT people I've met have the sense of those eldery parents

sinful moon
#

ouch lol

#

and yeah our clients, especially the handful of wealthy individuals we support, are more likely to fall for bs MS tech support scams than something more advanced actually trying to impersonate us.

That’s thankfully gotten better though as we’ve increased our awareness training, even if just mentioning how these scams work to them 1:1

#

They’re usually smart enough to call us instead of the fake number on their browser hijacked screen lol

molten sky
#

i'd wager QR codes are probably still top tier

sinful moon
#

lol as if our users are smart enough to even fall for the QR code scams

#

they’d try to scan it with their MFA app as we have taught them which would result in… nothing

half relic
#

I know someone who fell for one of those. I don't know why she thought microsoft wanted payment in play store cards

molten sky
#

speaking of qr codes, thank god restaraunts are finally stopping that crap

#

that was horrible

#

not even a security thing just horrible

sinful moon
#

thankfully never run into that but yeah it’s gross

half relic
#

what were res?

#

restarants doing?

sinful moon
molten sky
#

no menus, you gotta scan a QR code they stuck to your table and browse their online menu with shit reception on a shit website

#

worst thing since microsoft

half relic
#

ohh that's annoying

#

I'm glad we can't remote into customer's computers

#

i dont' want to know what they have on their computers

pliant onyx
#

True, but consider:

sinful moon
#

I have seen some very advanced coordinated financial scams though against one of former clients who operates a local franchise chain

queen flare
#

what's a qr code scam

molten sky
#

most qr codes

sinful moon
#

They had insider knowledge about how the property management system worked at this multinational chain and scammed many many locations out of significant sums of money by making “test” transactions which were anything but a “test”

molten sky
#

but if you mean security wise, typically phishing

eternal timber
pliant onyx
eternal timber
#

Probably

sinful moon
#

yeah they’ll use QR codes to get around anti-phishing software techniques

eternal timber
molten sky
#

cause a lot of people used to assume qr codes in certain places = safe

sinful moon
#

that too

queen flare
#

would this fall into social engineering?

sinful moon
#

yes

molten sky
#

about the same degree as normal phishing

#

people are dumb

sinful moon
#

It’s not any more advanced, it’s just “hiding the lead” so to speak

molten sky
#

good way to put it tbh

sinful moon
#

The only time I’ve seen a user actually receive one that wasn’t blocked by our email security software they just straight up asked us what to do with the QR because they had no idea lol

half relic
#

lol

sinful moon
#

so I doubt the effectiveness unless you’re moderately “with it” tech wise and have grown to trust QR codes

molten sky
#

apparently mesh handles qr codes now (for emails)

#

idk who else

sinful moon
#

oh the Mesh email security platform? Yeah I tried to steer us that way, but we went with another well respected vendor

#

which also happened to be on my shortlist of recommendations so I can’t complain

molten sky
#

inky?

sinful moon
#

Nah. Guess it doesn’t matter me saying realistically, just taught to be cagey. We went with Avanan which was gobbled up by Checkpoint. Checkpoint I have mixed feelings about but their core Avanan email security platform is fantastic

molten sky
#

oh man isn't avanan the one with the sketchy gsuite integration

#

(for 365 it's solid)

sinful moon
#

I wouldn’t even know, we’re pure 365

#

They at least claim that they were amongst the first to really debut the API based model instead of hardware gateways around 2015ish

molten sky
#

idk if it's still the case today but i think avanan was the one that required just a straight super admin acct for their "integration" with gsuite, rather than tying into any api or having limited perms

sinful moon
#

Ah gross, having glanced at those docs I don’t think that’s still the case, but yeah never something I’ve had to put into practice

molten sky
#

in their defense i guess, working with google's api stuff fucking sucks

sinful moon
#

I was trying to go Mesh because MSP focus and also still had a gateway option when we still needed ours, but by the time we finally started shopping around, we were pure 365

queen flare
#

now i might make a qr code rickroll and put it in a random bathroom

sinful moon
#

but yeah I’m significantly happy with the improvement in detection and etc compared to our old Barracuda Gateway

eternal timber
#

Make it a Fetty Wap roll

molten sky
#

but yeah 365 wise mesh inky and avanan are all solid, i was impressed with mesh but can't complain about either of the bunch (again, except that gsuite integration showing a pretty bad security mindset)

sinful moon
#

I used to have to remediate client requests for 40+ spam/phishing attempts every two weeks, now it’s easily under 10 for two weeks

jolly aspen
sinful moon
#

thinking of Gateways, you may be interested to hear null that for personal use, I installed a Unifi Gateway Max in our home network and am extremely happy with it

#

also happened to take over network admin from my SO finally lol. Despite also working in IT, he himself admits he’s not a “networking person”

molten sky
#

i've been iffy about unifi over the years but at this point i think their products are getting pretty mature

#

kinda want a few

sinful moon
#

Yeah they were no question for APs and switches but their gateways have gotten good enough they’re just replacing our firewalls at many client locations

queen flare
#

i have an innovative idea

molten sky
#

those aren't allowed here

queen flare
#

rubberducky but it plays rickroll instead of payload

molten sky
molten sky
sinful moon
#

Plus I mean, finally a mobile app that’s not crap and lets you administrate 97% of everything you can in the controller

half relic
sinful moon
#

Yeah it’s actually kind of wild

half relic
#

or scp foundation

sinful moon
#

never thought I’d run into a OEM networking app that wasn’t crap

molten sky
#

most companies can't even make their web ui not crap

half relic
#

if i didnt' know what it was that would be so weird to get from a qr code in a bathroom

#

the stories are just strange

sinful moon
#

mhmm but to be fair Ubiquity’s UI is kind of known for being fantastic

#

and yep, I’m just self hosting the Unifi Network Server on my… erm, server

#

you can get gateways with that feature integrated, but I rather like that being its own thing

molten sky
#

aight time to knock out

sinful moon
#

to be clear, when the server is down, the devices continue to function as normal, it’s only needed for management and stats

molten sky
#

will hopefully know tomorrow if i can actually accept this offer

sinful moon
#

alright see ya then! Nice chatting as always

molten sky
#

if so, finally free

sinful moon
#

Not sure what this is but indeed, good luck!

cloud quiver
#

🙂 👋 🍪

molten sky
#

tldr; vuln management/offensiveish role at a larger bank

#

will gladly take their $

sinful moon
#

Ah very nice, should be great. Good luck indeed!

grizzled void
half relic
#

I don't think i will ever get a job like that living in a rural area with no plans to move

#

but good luck

#

sorry

sinful moon
#

just use your human networking resources as much as you can for that chimera

half relic
#

there are no organizations big enough in like a 100 mile raius

jolly aspen
split compass
#

Oof, got distracted waves goodbye to 40days

sinful moon
#

I’ve actually turned down two offers to work at a multinatioinal bank in DFIR/SOC since I was still getting tons of experience from my current job. But yeah when they’re hiring again I’m for sure going for it

sinful moon
austere verge
#

Someone told me their ip ended in .822 and I just looked at them like -_-

sinful moon
#

lol

half relic
#

i don't knwo if i would want to work for an acutaly bank though I kinda like working for a company where the product is some kind of technology becuase the people abover you understand what you are doing

#

and tech companies tend to be more laid back usually i think

sinful moon
half relic
#

lol

#

well that's cool

#

i don't really know anyone who would be able to help though

molten sky
grizzled void
sinful moon
#

Yeah meanwhile this is a major major corporate org so it would be a huge adjustment for me

austere verge
jolly aspen
#

Tech companies have lots of pseudo or non tech people and that part can be mind numbing

half relic
#

the first place i worked after school was a smaller company and they put the cfo in charge of it for some reason

#

he had no idea what anything meant

#

but he didnt' want to spend money on anything

sinful moon
#

lol my managed service provider is so small that my boss is the CEO/owner/lead tech so…

jolly aspen
#

If they see a terminal they think you’ve made a deal with Gandalf

sinful moon
#

yeah different vibes

half relic
#

i think small companies are generally better

#

not for money i guess

sinful moon
#

They can be, except when you get into all of the small business issues lol

#

It’s a blessing and a curse

half relic
#

like what

jolly aspen
#

Single user for all devices, password is company name ☠️

sinful moon
#

Informally I have like 6+ job roles, great experience, but wild to keep track of everything I practically do

half relic
#

oh yeah

sinful moon
half relic
#

the company i worked for had really obvious sql injection vulnerabilites in the internal software that the sales peopple used

split compass
#

'==1;

sinful moon
#

we call him little bobby drop tables

half relic
#

end of life servers

sinful moon
#

that can be a difficult fight to have as an MSP sadly lol

half relic
#

one person accidentally downloaded ransomware that encryped the big shared drive that every office in the whole company used

#

i wou;dnt' talk about it but that company is gone now

austere verge
sinful moon
#

ouch, but also that shouldn’t be as possible due to permissions and more

half relic
#

so it doesn't matter now

#

yeah

sinful moon
#

mhmm

half relic
#

fortunately there were backups

sinful moon
#

we have hourly backups of servers

half relic
#

she just shouldnt have been able to encrypt things she didn't have anything to do with

split compass
sinful moon
#

only ever had one client ransomwared… twice. It was before my time but both time it was due to the company refusing to accept our security standards, demanding everyone was admin with full access to shared folders and more, etc

jolly aspen
#

‘ ==1 AND DROP Table

everyone gets the day off, forever

sinful moon
#

they were not a client for much longer lol

split compass
#

I have a few systems at work where I've asked for a Read account so I can better do reporting/root-cause analysis etc.
And end up with RW 😄

sinful moon
#

the person who was to blame was the same who demanded weakend security or else “they could not function” lol

karmic turret
#

hey guyz, what's up with that “certification” thingy they were gonna release today? i don't see anything new

jolly aspen
half relic
#

for updates

sinful moon
#

lol no one is that important and if they are, they need correct failover/HA

half relic
#

well if you don't update them there could be a lot more downtime lol

sinful moon
#

we administrated a national transportation company and they were more than happy with our Friday evening maintaince

jolly aspen
tawny trench
#

good morning

half relic
#

yeah people who have been comprimised have a completely different opinion about updates

#

its hard to convince them beforehand though

karmic turret
sinful moon
#

basically they got bought out in a pump and dump move from a VC

jolly aspen
sinful moon
#

so they only care about cost cutting to resell, and MSP looks like an expenditure

karmic turret
grizzled void
#

yes

molten sky
sinful moon
#

moved our VMs from a dataceneter to… “the cloud” aka Microsoft’s datacenter and they’re going to be charged out the butt for those VMs… but hey “the cloud” is more marketable for selling the company lol

grizzled void
half relic
#

I think they appreciate yoiu more if things break once in a while and you can rescue them

sinful moon
jolly aspen
half relic
#

i think its actually true

sinful moon
#

I know all of the actual boots on the ground employees miss us tons and compain

half relic
#

you look better when you are doing things wrong but can 'fix' it fast

split compass
half relic
#

that's what the guy who created the software with the sql injection was like

split compass
sinful moon
#

They’re also big enough that I had the pleasure of preventing major threats like qbot and other big name initial access malware from fucking up their entire org

half relic
#

he was definately doing security wrong lol

sinful moon
#

usually the stage 1 loader would run but our EDR would catch stage two and I would more than remediate and do writeups

karmic turret
#

@sinful moon do you only do defence or are you also into red teaming?

sinful moon
#

My org is so small I do everything even tangentially related to “security”. However most of my offensive stuff is informal, as my firm does not meet the criteria for being certified for pentesting for PCI-DSS compliance and similar. Most often I do an initial test before we hire a qualified org

half relic
#

what kind of test

sinful moon
#

although some of the most fun I’ve had was testing our current EDR product to which our managed SOC called us in alarm a couple times that day lol

sinful moon
# half relic what kind of test

I mean I can’t say I’m a formal offsec professional but I know enough to cover our companies butt to make sure I can find concerns before we bring in a third party. Sure some of that is defensive and sometimes a bit of poking around

karmic turret
half relic
#

interesting

sinful moon
#

when we’re the IT for dozens and dozens of companies we want to put on a good face that we didn’t at least overlook something obvious for our customers

karmic turret
sinful moon
magic isle
#

Can anybody here hack and destroy a roblox game

#

I need help urgently

#

I don't really have any hacking experience but I can here to seek help

sinful moon
#

@shell nova please see the above, thank you

twin ridgeBOT
#

Gave +1 Rep to @shell nova (current: #13 - 623)

sinful moon
#

lol accidental thanks

whole yew
magic isle
#

I've reported them so many times

whole yew
#

It would be illegal to hack and destroy a roblox game as a private citizen, regardless of the reason.

static acorn
grizzled void
#

@sick lance nvm juun here

whole yew
karmic turret
magic isle
#

I got well ig I'll keep searching

#

I just ask because I literally watched a kid get groomed

eternal timber
#

What’s everyone doing

magic isle
#

And I really need to take this down because roblox admin isn't doing shit

whole yew
magic isle
#

I understand

#

It does violate the TOS

#

But no body is doing anything about it

#

Have screen shots and everything

drowsy dust
static acorn
magic isle
#

I got banned from the said game with the explanation "for being a rat"

whole yew
#

Then keep reporting them to roblox support. If it's against ToS, roblox can shut it down.

magic isle
#

Alrighty

whole yew
#

Keep outside drama outside, I am just telling you that what you want to do is illegal and I strongly recommend you do not take any action to damage or compromise that server or game.

eternal timber
halcyon dune
#

Hi, someone hacked my call of duty account but i don't know how and why

sinful moon
#

as I understand it you need to eat an excessive amount of Tuna for that to even be an issue

eternal timber
jolly aspen
sinful moon
eternal timber
#

Just don’t eat 10 cans or smth

drowsy dust
#

true

static acorn
eternal timber
jolly aspen
halcyon dune
static acorn
eternal timber
sinful moon
jolly aspen
eternal timber
magic isle
#

Idk dude

#

Kids are involved

static acorn
magic isle
#

And I just can't let it slide

#

I hate pedos

whole yew
jolly aspen
#

Uggh

half relic
#

you need to hack roblox to protect kids?

#

lol

magic isle
#

🤨

drowsy dust
#

tuna time boys

whole yew
# magic isle And I just can't let it slide

Seriously, report to Law enforcement. They will kick it up the chain, and report them to roblox. I appreciate that you want to protect people, but complaining about it here isn't the way to go about it.

karmic turret
# magic isle I hate pedos

if that really is the case, the best that you can do is write an Email (or maybe a hundred) to Roblox.

#

with evidence

slate wing
#

Yo guys

#

anyone know how to use rdp?

whole yew
#

Do not collect evidence of wrongdoing. You can actually poison the case and ruin it.

jolly aspen
sinful moon
slate wing
magic isle
#

Then what do I collect?

whole yew
#

The best thing to do is report to police, and with that I'm declaring this topic closed. Please move on to another.

jolly aspen
slate wing
whole yew
#

No more discussion of this hacking roblox nonsense.

slate wing
sinful moon
runic copper
#

i cant believe this aws section is like $350 omg

sinful moon
#

You probably need to work it out with the server admin

eternal timber
#

Used to love tuna till I had it every day for half a year

half relic
#

are you trying to connect from linux or windows

jolly aspen
runic copper
sinful moon
drowsy dust
#

tuna

static acorn
#

TUNA

sinful moon
# runic copper was not prepared that

Spinning up this AWS infra on the fly is extremely expensive. This used to be exclusive to business customers of THM. So them even offering you to pay out of pocket is actually a win

drowsy dust
#

my cats going crazy

#

im just trying to eat tuna

runic copper
whole yew
#

Nope, move on.

jolly aspen
#

Damn. Just blasting that IP eh

slate wing
#

Not sure why I leave the domain blank

whole yew
#

No more discussion of that topic. Last warning before mutes get handed out.

half relic
#

domain is for if you are logging in with an active directory user

runic copper
#

top level discord mod

sinful moon
#

That error doesn’t really say much lol. And you don’t need a domain unless it’s Active Directory authenticated

slate wing
runic copper
#

i am just wondering what i tabbed into when i opened discord

jolly aspen
#

Juun bout to go oprah with those mutes

eternal timber
sinful moon
#

yes that’s just what I said although why does that chat have an RDP server lol

whole yew
drowsy dust
grizzled void
#

I would advise removing this photo so other's don't get too curious about this IP address

sinful moon
#

oh I misunderstood the badness

runic copper
slate wing
#

in the cloud so i thought it is ok

grizzled void
whole yew
#

Posting public IPs in a hacking discord is not a good idea

whole yew
#

someone is going to want to play silly buggers

sinful moon
#

My next troubleshooting steps would have been a port scan lol

half relic
#

telnet ip 3389

slate wing
grizzled void
eternal timber
jolly aspen
#

…well if they can’t access it, surely no one can

sinful moon
#

But okay is this infra you operate or not? If not just work with the operator who probably knows more about the setup

drowsy dust
slate wing
grizzled void
#

I have some familiarity with using cloud VMs, yes

eternal timber
jolly aspen
#

Hello, is this IT support? Yess I spilled tuna on my keyboard

slate wing
half relic
#

usually

slate wing
#

i am doing az 900 rn

grizzled void
#

I have az 900

slate wing
drowsy dust
grizzled void
#

I spent less than a week studying for it as I had some familiarity before deciding to take it. It was fairly straight forward.

static acorn
#

im cuddlin my cat rn. he came into my living room and requested cuddle. he will now recive the pats

sinful moon
#

I run several cloud VMs both personally and professionally, just makes me sus as to why you’re having issues with a simple task such as this if you’re actually studying for these certs

slate wing
sinful moon
#

lol like simple things, is 3389 actually open to the internet? Normally that’s pretty not great but who knows

slate wing
#

u had issue with it too

#

lol

grizzled void
slate wing
#

u can't troubleshoot it so 😂

sinful moon
slate wing
#

e

#

?

sinful moon
#

You’re just not answering any meaningful questions or explaining reasoning. So is 3389 just raw dog open on this, and who’s infra is it, yours or?

mellow narwhal
#

I've found lots of 3389's open, but all of them were Chinese stuff, so.... kekw

karmic turret
#

yo gang,

I need your opinion... would reverse engineering and malware analysis make me a better red teamer???? I really just wanna get into the top 50 in the world!!

sinful moon
slate wing
mellow narwhal
#

Yeah its mostly just Asian countries from what I see

sinful moon
#

Infrastructure

slate wing
#

I can share my screen thee

mellow narwhal
#

Germany does have some exposed protocols though

slate wing
sinful moon
#

lol while I am tempted it’s usually best to keep this in chat

slate wing
#

t be shy

#

lol

sinful moon
#

yes, but hosted at AWS? DigitalOcean? Another vendor? Do your cloud networking setting even expose that port? etc

sinful moon
#

Yeah I guess I should strike DigitialOcean from the above, they don’t technically support Windows Server although you still can

half relic
#

the port is probably closed like @sinful moon keeps saying

grizzled void
#

I'm assuming they are using Azure as they are studying for the AZ 900

half relic
#

hosting company

sinful moon
#

DigitalOcean is another cloud hosting vendor like AWS and Azure

sinful moon
#

then sure just use their guide above lol

slate wing
grizzled void
sinful moon
#

I have a cloud and infosec background, no certs, just self taught for over 20 years

#

and yeah it’s probably the biggest out of the main three AWS, Azure, GCP

#

or one of the

slate wing
sinful moon
#

DigitalOcean is a bit friendler to small/medium business and individuals

static acorn
sinful moon
# slate wing nice, but why no certs?

Personally I don’t think I want or need any cloud certs, I’m not going into devops or devsecops despite having experience in those feilds professionally. My professional experience will help.

As to why not general certs, it depends. I’ll grab some when I next go job hunting but I have over 4 years doing basically it all at my current job which will look wild on a resume

static acorn
#

tuna

half relic
#

certs are expensive

rapid merlin
#

I'm in love with WPF

sinful moon
#

that too and I have to pay out of pocket lol

#

especially lame with so many certs expiring after three years

drowsy dust
sinful moon
#

If I started a cert when I got my first IT job, it would have expired already

slate wing
rapid merlin
half relic
sinful moon
slate wing
sinful moon
#

I was basically hired as help desk and rapidly rose to infosec (everything) and sysadmin

half relic
#

sadly my first job after school was help desk but it requred a computer science degree

#

for some reason

#

sad that it requires that

orchid dome
sinful moon
#

meanwhile it’s been my experience that CS grads are useless lol

half relic
#

hey

#

lol

sinful moon
#

Not all, but lately these days, I’ve heard others in CS degrees who stated that like half of their class struggled to even turn on their computers in the first lesson

grizzled void
#

Why is Paganini so good?

orchid dome
sinful moon
#

kids these days don’t have the benifit of groing up with computers, they grow up with tablets and phones instead, and have a warped sense of how tech works

grizzled void
slate wing
half relic
#

i didn't get a computer till i was 16

#

too expensive

drowsy dust
sinful moon
#

I was lucky and got my first hand me downs around 9 years old

#

in the wonderful year 1999

grizzled void
sinful moon
#

They were all older computers, but fixing them up and etc got me into this all

slate wing
orchid dome
sinful moon
#

I mean technically ealier, depending on how you count. 9 was just when I had “my own” computer to do anything I wanted with

grizzled void
#

Hot take: I liked XP

sinful moon
#

I don’t think that’s a hot take

orchid dome
silver sky
#

That's not a hot take

#

Everyone of the xp generation loves xp

grizzled void
#

I also liked Vista kekw

sinful moon
#

a hot take but true is that Win 2K is the best Windows OS ever and it’s all been downhill since

half relic
#

it seems like dll's would randomly go missing with xp

orchid dome
silver sky
silver sky
timid prism
#

my grandpa has a old windows xp or smtn i dont know
all i used to care was it had solitare

sinful moon
#

Vista is what pushed me to using Linux instead in the mid to late 00s

#

been there since, but I use every major OS on the daily

half relic
#

i just wanted to try linux

#

i have no idea why

half relic
#

its a good thing i did though that's the only reason I have my job now

#

the cs degree was pointless lol

sinful moon
#

I’m literally the only Linux sysadmin at my company lol

#

so good stuff

half relic
#

so you are the best and the worst admin there

sinful moon
#

boss randomly asks, “can you whip up a webserver who hosts three legacy web clients we have who are too cheap to move on?” Sure!

#

very simple docker compose stuff but I was happy with it and the clients didn’t know the difference

half relic
#

the other 2 don't use a database?

#

oh wait

sinful moon
#

plus it obsolited an ancient Win 2008R2 box we had serving this stuff previously lol

half relic
#

lol

sinful moon
#

yeah they’re literally just static sites

half relic
#

wow

#

were they built with dreamweaver lol

sinful moon
#

Wasn’t too hard, but I had some previous experience with deploying Docker Compose statcks and stuff, so wasn’t too difficult to make my own

sinful moon
#

I didn’t do much to the sites besides migrate them and update copyright notices and etc

half relic
#

i don't think i have ever seen a live site that was built by hand in html

#

with only html

sinful moon
#

You have I’m sure, you probably weren’t aware of it

half relic
#

well i mean the server

sinful moon
#

WYSIWYG editors kinda died in the 00s

half relic
#

and i work for a web host

sinful moon
#

Well CMS systems + CSS is an entirely different beast

static acorn
# drowsy dust tuna

Active directory? Boi im about to Actively Direct you to my cabinet and give you some tuna!

eternal timber
sinful moon
#

“What you see is what you get”, basically like how MS Word shows you the formatting without markup, WYSIWYG web editors were the same way

#

and produced awful awful HTML

half relic
#

that is true

#

i havent' heard anyone say that in a long time

#

thoguh

sinful moon
#

lol that’s because MS Frontpage and Dreamweaver have died

half relic
#

some people still try to use it

sinful moon
#

actually not sure if Dreamweaver is still alive but it would be better off dead if it isn’t already

half relic
#

there are no new versions

sinful moon
#

anyways, that’s my very brief devops experience if you can even call it that lol. But yeah I’ve got quite a bit of other Docker/Docker Compose experience under my belt

half relic
#

Im actually not sure why you need docker for flat html but I am used to control panels like plesk and cPanel

sinful moon
#

we’re just too small for k8s to make any sense

sinful moon
half relic
#

makes sense

#

so to keep them segmented basically

sinful moon
#

mhmm

brave hinge
#

Hello Hackers!

static acorn
white crow
#

My friend is a data engineer with 2.9 years of exp. and he is planning to switch towards Security Analyst(SOC). Is this a right move for him. Because there are no openings at present for his current role in the job market?

sinful moon
#

the Nginix Proxy Manager just handles the virtual hosting requirements and forwards to the correct container. I’d recommend Traffik instead though if I were doing this now

sinful moon
#

Is Data Engineering like PowerBI bs and etc? lol, usually that sorta thing has a fancier title so idk

#

Yeah search basically confirmed it’s like PowerBI stuff and similar

white crow
#

@sinful moon Excatlyyy

#

He worked on data migration project

sinful moon
#

Yeah makes sense, one of our clients is going through an awful migration for their data which is not going well, but whew, they are letting us go so not our problem lol

sinful moon
#

turns out upending 20 years of legacy technology debt they blamed on us even though it was company internal is not easy. All of their DBAs and similar were always internal lol

onyx timber
#

Which company are you from

sinful moon
#

Me? I work at a Managed Service Provider so we’re the IT for dozens upon dozens of clients

onyx timber
#

Ohh noice

onyx timber
#

I am currently working as an intern at a startup as a soc lv1

sinful moon
#

Yeah it’s both great and has its downsides. When I was learning AD/GPO for the first time though, meant I had 12+ example domains to get aquatinted with and see real world examples of

white crow
#

@sinful moon His designation is software engineer with band U2. Is he doing a right move towards SOC?

sinful moon
#

I can’t rightfully say, but I mean, SOC gets a lot of data, and he is a data engineer lol.

#

if they have SIEM then he should do just fine if he adapts to the security focus

#

SIEM is very applicable to data engineering

#

oh “with the band U2” you don’t mean… lol

grizzled void
#

When I was working for an MSP it was a team of 4 (myself, the owner, and 2 others) managing 50+ small/medium companies. Boy some of the people calling in with their issues were not that pleasant to speak with.

white crow
#

My suggestion is like A.I is rapidly increasing and jobs are getting decreased. I suggested him to do a side hustle on SOC as cybersecurity jobs will be increasing and it's ever green.

sinful moon
#

more on the order of 10-15 employees lol

half relic
#

Im just glad most of our customers are more technically proficient than most end users

#

when i worked on a help desk someone once called us cause the coffee maker wasnt' working

sinful moon
grizzled void
#

we had a 5th guy who was hired in shortly after me however we had to let him go. Sadly the MSP no longer exists. I have a lot of appreciation for it and the coworkers I had

onyx timber
#

I lately had an issue with thm I purchased the 1 month premium membership and paid the required amt and still I am not able to access the premium rooms and material and also contacted the help support but ain't got any response donyou have any idea what should I do

sinful moon
#

Ah totally fair, ours has been running for over 20 years, of which I’ve only experienced about 4

rapid merlin
#

@sinful moon I worked in finance on 20yo legacy code 😄 https://en.wikipedia.org/wiki/Software_brittleness

In computer programming and software engineering, software brittleness is the increased difficulty in fixing older software that may appear reliable, but instead, fails, when presented with unusual data or data that is altered in a seemingly minor way. The phrase is derived from analogies to brittleness in metalworking.

orchid dome
sinful moon
#

Moderators here will not be able to remediate fully

onyx timber
sinful moon
#

Keep in mind they operate on GMT/UTC time

half relic
#

how long ago did you contact them

onyx timber
#

Yesterday

sinful moon
#

Then let them address it today, again this is a UK company

onyx timber
#

Sure I saw will but one the sub told to join discord for instant help so I joined it today

sinful moon
#

If you don’t get anything by noon GMT/UTC time, then sure you could send a follow up

onyx timber
#

Yaaa

sinful moon
#

Totally fair, users or mods here can help you with tons of like tech support issues with the site, but billing and etc is beyond our control

onyx timber
#

Does this membership issue occurs always or is it just mee

slate wing
#

idk why but running a vm on the chome seems way fun then on a nomal vm

grizzled void
sinful moon
onyx timber
slate wing
sinful moon
# slate wing am i the only one?

Try ssh tunneling your HTTP(S) traffic to your local computer from your cloud VM and using Burp Suite as SOCKS proxy to send to Foxy Proxy in Firefox on your local. Now that is fun and awesome

#

I do the same to tunnel RDP traffic from THM to my local and it’s wild

#

erm minus the Burp and etc obvs

sinful moon
#

yes lol

slate wing
#

Lol i don't know what u mean too technical

onyx timber
#

So I had a question I started cybersecurity a month back I have enough knowledge about the basics but it's theoretical so I would like some guidance

sinful moon
#

my cloud VM is the one connected to THM via OpenVPN and this segments my exposure to THM/HTB entirely

#

compared to using a local VM

rapid merlin
#

announcement soon I suspect 🙂

sinful moon
#

or in other words it’s babby’s first c2 lol

#

since I use this server basically as such being my attack machine

strange current
#

do i try to finish the cryptography unit today or do i just play hell let loose

half relic
#

how much do you pay for the server

#

just curious

sinful moon
#

I over specced it so I’m living with the nearly $20 a month cost, but realistically that’s not doing too bad. I could have just gotten away with a $5-10 expenditure instead, which helped when I was actually deploying this cloud VM provider at work

#

I do not actually need 2 cores and 4GB of RAM on my headless attack machine lol

rapid merlin
#

1h 15m

half relic
#

yeah probably not

rapid merlin
#

fml I hate staying awake

#

aaaaaaaaa

sinful moon
#

Just sounded neat and I didn’t know what I needed until I tried lol

#

i have a screenshot of that somewhere

rapid merlin
rapid merlin
sinful moon
#

this guy

rapid merlin
half relic
#

ah neat

#

i haven't used arch in a very long time lol

rapid merlin
sinful moon
#

lol I’ve used Arch for 18 years but yeah totally fair

onyx timber
#

So I had a question I started cybersecurity a month back I have enough knowledge about the basics but it's theoretical so I would like some guidance

sinful moon
#

only regret for a pentesting server is postgresql admin for metasploit is a pain in the butt for rolling release

#

so I had to learn how to be DBA just to update that stuff… if I don’t just get fed up and wipe it out lol

grizzled void
orchid dome
strange current
half relic
#

lol i can see that i just installed kali